Changing the password: the Logout button at the far right of the toolbar became an Account menu that names the signed-in account in an entry of its own that cannot be picked, with Change password... above Logout, and the new dialog (src/editor/auth/PasswordDialog.ts) asks for the current password, the new one and its repetition, all three as bullets, and stays standing when the server refuses so that it can say why, unlike the other form dialogs; the rules for empty, too short, new equal to old and a differing repetition sit as the pure function passwordProblem() next to loginProblem(), the API gained POST ?r=auth/password which answers 204, insists on the current password although a session is there, enforces a minimum length of 8 in UserStore::MIN_PASSWORD_LENGTH and again in the client so the mask can answer without asking the server, and the new SessionStore::destroyAllFor($user, $keep) ends every other session of the account while the tab that changed the password keeps its own; the placeholders admin/admin and user/user stay as they are, which the length check does not touch because it only runs when a password is set through the API; e2e 45 grew by 8 checks for the menu, the dialog, both refusals and signing in with the old and the new password, and it sets the e2e account back at the end - a run dying in between leaves it on <password>-tmp, which a make-user.php call repairs (#182)

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/editor/Editor.ts

@@ -10,6 +10,7 @@ import {
   clamp,
   HStack,
   isRendering,
+  Menu,
   Panel,
   renderCount,
   requestRender,
@@ -27,6 +28,8 @@ import { GameViewport } from './viewport/GameViewport';
 import { SceneViewport } from './viewport/SceneViewport';
 import { TAB_OF_ASSET } from './assetTabs';
 import { attachAutosave } from './autosave';
+import { PasswordDialog } from './auth/PasswordDialog';
+import { dialogSlot } from './FormDialog';
 import { ContainerEditor } from './container/ContainerEditor';
 import { EditorRun } from './EditorRun';
 import { GraphEditor } from './graph/GraphEditor';
@@ -73,9 +76,13 @@ export type PluginTabId = `plugin:${string}`;
 export type TabId = CentreTab | PluginTabId;
 /** An open document (#171): an asset by its id, or the list the List tab edits – there is one. */
 export type DocumentId = `asset:${string}` | 'list';
-/** How to end the session; the button for it sits in the toolbar. */
+/** The account behind this session; the menu for it sits at the far right of the toolbar. */
 export interface EditorAccount {
+  /** Who is signed in – the menu says so, since the toolbar has no room for a second label. */
+  user: string;
   logOut: () => void;
+  /** Rejects with `WrongCredentialsError` when the current password does not match (#182). */
+  changePassword: (current: string, next: string) => Promise<void>;
 }
 
 /** A button in the tab row. */
@@ -190,6 +197,7 @@ export class Editor implements PlayHost {
   /** The plugins of this editor and their switches; null until `startPlugins` has run. */
   plugins: PluginManager | null = null;
   private readonly toolbar: Toolbar;
+  private readonly passwordDialog = dialogSlot<PasswordDialog>();
   /** Drawn-frame count at the last measurement, not a counter of its own. */
   private fpsFrames = 0;
   private fpsElapsed = 0;
@@ -259,7 +267,7 @@ export class Editor implements PlayHost {
       openSceneMenu: (anchor) => this.projects.openSceneMenu(anchor),
       togglePlay: () => (state.mode === 'edit' ? this.play.play() : this.play.stop()),
       togglePause: () => this.play.togglePause(),
-      logOut: () => account.logOut(),
+      openAccountMenu: (anchor) => this.openAccountMenu(anchor, account),
     });
     root.add(this.toolbar);
 
@@ -415,6 +423,34 @@ export class Editor implements PlayHost {
     state.on('mode', () => this.editorRun.invalidate());
   }
 
+  /**
+   * The account menu under its button (#182). The name stands in it as an entry that cannot be
+   * picked: it says who is signed in without costing the crowded toolbar another label.
+   */
+  private openAccountMenu(anchor: Widget, account: EditorAccount): void {
+    new Menu([
+      { label: `Signed in as ${account.user}`, disabled: true, onSelect: () => {} },
+      { separator: true },
+      {
+        label: 'Change password…',
+        onSelect: () => {
+          const dialog = this.passwordDialog.open(
+            new PasswordDialog(account.changePassword, () =>
+              this.state.setNotice('Password changed – your other sessions were signed out'),
+            ),
+          );
+          dialog.focusFirstField();
+        },
+      },
+      { label: 'Logout', onSelect: () => account.logOut() },
+    ]).openBelow(anchor);
+  }
+
+  /** The open "Change password" dialog, for the check scripts. */
+  accountDialog(): PasswordDialog | null {
+    return this.passwordDialog.current();
+  }
+
   /** Whether `id` names a tab already – a built-in one by its own id, a plugin's by the id it gave. */
   hasTab(id: string): boolean {
     return Object.hasOwn(TAB_LABELS, id) || this.pluginPanes.has(`plugin:${id}`);
@@ -621,6 +657,8 @@ export class Editor implements PlayHost {
     this.editorRun.shutDown();
     await this.plugins?.stopAll();
     for (const cleanup of this.cleanups.splice(0).reverse()) cleanup();
+    // Closed rather than just thrown away with the overlay below, so the slot lets go of it too.
+    this.passwordDialog.current()?.close();
     // A menu or a picker left open belongs to widgets that are about to be destroyed.
     for (const popup of ui().overlay.removeChildren()) popup.destroy({ children: true });
     ui().focus.blur();